CVE-2001-1497

Published: Dec 31, 2001Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack.

Affected (13)

Products: Microsoft: Ie, Internet Explorer

Microsoft

2 products

Internet Explorer

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ie	Version 4.0.1
Microsoft Ie	Version 4.0.1
Microsoft Ie	Version 4.0
Microsoft Ie	Version 4.1
Microsoft Ie	Version 4.1
Microsoft Ie	Version 4.1
Microsoft Internet Explorer	Version 4.0.1
Microsoft Internet Explorer	Version 4.0.1 sp2
Microsoft Internet Explorer	Version 4.0
Microsoft Internet Explorer	Version 5.5
Microsoft Internet Explorer	Version 5.5 sp1
Microsoft Internet Explorer	Version 5.5 sp2
Microsoft Internet Explorer	Version 6.0